Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: rNaAUPSTPqsqQ6NglNQoOUezsq0ma/4vIAJNecb2Hqk=
Subject key identifier: 1B:CC:4A:7A:A3:00:DD:C3:25:32:2C:30:0E:36:51:82:87:EA:99:53
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019747E77D97301C46E4715C8FBB285E1E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 1269
Signing time: Sat 07 Jun 2025 01:00:42 +0000
Manifest this update: Sat 07 Jun 2025 01:00:42 +0000
Manifest next update: Sun 08 Jun 2025 01:00:42 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: oNX2jlwypzteAB7LDsPCAmbDFJotI1LHAQI9nA3NVCo=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:7d:97:30:1c:46:e4:71:5c:8f:bb:28:5e:1e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Jun 7 01:00:42 2025 GMT
Not After : Jun 8 01:00:42 2025 GMT
Subject: CN=1bcc4a7aa300ddc325322c300e36518287ea9953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:29:1d:cf:c3:f6:2b:08:62:cc:69:ba:07:ec:
83:73:08:1e:bb:b6:c5:12:a4:78:70:86:ae:77:74:
94:18:32:04:ab:d4:4a:92:61:16:fe:d9:e4:bf:62:
dc:95:96:c0:40:d1:0b:03:a4:37:05:0e:ed:4f:2c:
25:d6:51:32:b0:5f:44:fa:ee:b1:d1:56:2a:32:d5:
79:e8:70:98:a8:2c:82:17:c1:9b:18:57:31:36:17:
d0:56:8a:0a:18:3c:b3:c5:4c:9d:90:c0:b8:f7:fe:
a4:9d:46:b2:c6:4a:9d:a4:19:2c:9b:f7:65:63:c9:
21:55:d8:94:15:65:18:d8:d5:f6:39:10:ed:b8:f4:
7a:1a:0c:9c:d6:7c:24:29:1f:5d:aa:54:90:09:4b:
ad:dc:81:cf:21:7f:cb:b2:a0:45:5e:da:1f:33:0f:
fb:1b:76:67:64:9e:28:4f:24:d6:d1:a2:da:7f:4c:
82:f5:66:8e:4a:db:b3:62:39:7d:74:0a:21:57:56:
93:09:e8:5e:4c:8b:d0:36:75:17:62:66:26:63:53:
c5:8f:e9:80:8e:0c:fe:ba:11:85:7b:d9:8b:6a:fb:
cd:51:58:a8:46:cc:bc:0b:50:17:99:0f:4f:5d:49:
4c:e8:9c:11:4a:1e:97:47:6d:92:fc:b2:b0:cc:ac:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CC:4A:7A:A3:00:DD:C3:25:32:2C:30:0E:36:51:82:87:EA:99:53
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cf:3a:f1:a9:ba:26:1d:89:e5:83:9a:d4:2d:7d:f2:03:04:
35:b9:56:e4:05:63:2e:7b:25:06:42:d3:16:38:8d:8f:34:4c:
e5:2d:ab:7a:a9:28:99:80:c0:72:23:1a:84:51:f6:29:ce:a9:
b2:50:d2:80:f8:09:b6:cc:75:18:3e:af:20:bc:7c:a6:66:4f:
e1:e3:4a:f6:07:fd:8f:e0:9e:8e:b8:df:47:b6:71:4a:af:a8:
28:62:ed:1c:d7:9c:c1:43:ab:e9:dc:15:3a:ea:08:44:0f:98:
6c:f6:d7:c4:34:32:5a:b8:06:04:84:87:6e:bd:96:f3:a4:f1:
ba:76:ae:bc:db:ef:ea:d3:87:5b:a0:31:90:83:54:7c:b1:96:
5c:9b:29:fc:93:c5:b4:db:c4:ad:59:6a:32:8e:bd:82:f3:50:
ab:f5:9a:f7:c3:ae:d7:a4:97:cf:78:a2:f9:ea:09:59:b4:be:
26:1a:79:5d:28:a5:d7:46:92:1d:58:91:62:25:18:3f:86:3b:
6b:72:db:bd:d4:94:0c:a7:e1:1c:45:fa:1c:33:b1:99:25:66:
c4:b7:74:f7:60:3f:53:85:42:c6:7b:0e:02:13:29:0f:b7:91:
57:8a:32:7a:cf:bc:24:c6:7a:ab:37:e6:a3:7d:2c:6a:c6:31:
15:a8:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:42 2025 by rpki-client